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IN THP CLAIMS 

Please caned claims 11,16, 26, 41, 46, and 56 and amend ckims 1, 15, 17, 30. 32. 45, and 47 as 
follows: 

1 . (CUIUIENTLY AMENDED) A system for controlling access to digital services 
composing: 

(a) a control center configured to coordinate and provide digital services; 

(b) an uplink center configured to receive the digital services from the control center and 
transmit the digital services to a satellite; 

(c) the satellite configured to: 

(l) receive the digital services from the uplink center; 

(ii) process the digital services; and 

(iii) transmit the digital services and configuration information for accessing the 
digital services to a subscriber receiver station; 

(d) the subscriber receiver station configured to: 

(j) receive the digital services and configuration information from the satellite; 
(S) control access to the digital services through an integrated receiver/decoder 

(IRD); 

(e) a conditional access module (CAM) communicatively coupled to the (IRD), wherein 
the CAM is configured to receive the configuration information, and wherein the configuration 
information haft been transmitted asynchronously; and 

(f) a custom logic block within the CAM, wherein the custom logic block is configured to 
dynamically reconfigure a hardware state machine in the CAM based on the configuration information, 
wherein the hardware state machine comprises custom logic that is used to control access to the digital 
services jmd wherein the hardware srntt? m a chine is nor clirec tl y ^qce^sible to a .syste m input/output 
module o r system hua of the CAM. 

2. (ORIGINAL) the system of claim I wherein the CAM comprises a smart card. 

1. (ORIGINAT.) Ihe system of claim 1 wherein the configuration information is 
encrypted. 
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4. (ORIGINAL) The system of claim 3 wherein the configuration information is 
encrypted through ft key exchange protocol. 

5. (ORIGINAL) The system of claim 4 wherein the key exchange protocol comprises a 
public key algorithm. 

6. (ORIGINAL) The system of claim 3 wherein the configuration information is received 
in uniquely encrypted, group encrypted packets. 

7. (ORIGINAL) The system of claim 3 wherein the custom logic block is further 
configured to: 

decrypt the coiifiguration information; and 

store the configuration information in one or more protected registers. 

8. (ORIGINAL) The system of claim 1 wherein the custom logic block is further 
configured to verity that the configuration information is authentic. 

9. (ORIGINAL) The system of claim 8 wherein the custom logic block is further 
configured to retain the configuration information if the configuration information ie authentic. 

1 0. (ORIGINAL) The system of claim 1 wherein the custom logic block is further 
configured to receive a synchronous command to reconfigure the hardware state machine using the 
configuration information. 

11. (CANCELLED) 

12. (ORIGINAL) The system of claim 1 whcicin the custom logic block comprises an 
asynchronous dynamic prc-pcrmutatioii module that employs a series of one a* more configurable 
multiplexors at the beginning of the hardware state machine. 
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13. (ORIGINAL) The system of claim 1 wherein the custom logic block comprises an 
asynchronous dynamic post-permutation module that employs a series of one or more configurable 
multiplexor at the end of die hardware state machine. 

14. (ORIGINAL) The system of claim 1 whetein the custom logic block comprises a 
dedicated hardware reconfiguration and input/output module that connects the hardware state machine 
to a system bus of the CAM and controls access to logic of die hardware state machine. 

15. (CURRENTLY AMENDED) A method for providing access to digital services 
comprising; 

(a) receiving configuration information in a security component compminfl a smnrt catd, 

wherein; 

(1) the configuration information has been transmitted asynchronously; and 

(2) the security component is configured to control access to the digital services; 

and 

(b) dynamically reconfiguring a hardware state machine in the security component based 
on the corifiguration information, wherein the hardware state machine comprises custom logic that is 
used to control access to the digital service*, and sJicrdfl a component of rhe hardware state machine is 
Qoj (iirectly orrr^KjM^ tQ a ^fem in pnt/ourput module or system bus of the security componenx . 

16. (CANCELLED) 

17. (CURRENTLY AMENDED) Uhe method of claim 1 5 whetein the configuration 
information is received through a broadcast stream, Internet, ^callbac k, or odiei - duuriburion olianncl . 

1 8. (ORIGINAL) The method of claim 15 wherein die configuration information is 
encrypted. 

19. (ORIGINAL) The method of claim 18 wherein the configuration information is 
encrypted through a key exchange protocol. 
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20. (ORIGINAL) The method of claim 1 9 wherein the key exchange protocol comprises a 
public key algorithm. 

21 . (ORIGINAL) The method of claim 1 8 wherein the configuration information is 
received in uniquely encrypted, group encrypted packets. 

22. (ORIGINAL) 'Ike method of claim 1 8 further comprising: 
decrypting the configuration information; and 

storing the configuration information in one or mote protected registers. 

23. (ORIGINAL) The method of claim 15 further comprising verifying the configuration 
information is authentic. 

24. (ORIGINAL) The method of claim 23 further comprising retaining the configuration 
information if the configuration information is authentic. 

25. (ORIGINAL) The method of claim 1 5 further comprising receiving a synchronous 
command to reconfigure the hardware state machine using the configuration information, 

26. (CANCELLED) 

27. (ORIGINAL) The method of claim 1 5 wherein the dynamic reconfiguration of the 
hardwate state machine reconfigures a permutation that employs a series of one or more configurable 
multiplexors at the beginning of the hardware state machine, 

28. (ORIGINAL) The method of claim 1 5 wherein the dynamic reconfiguration of the 
hardware state machine reconfigures a permutation that employs a series of one or more configurable 
multiplexors at the end of die hardware state machine. 
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29. (ORIGINAL) 'lte method of claim 1 5 wherein a dedicated hardware reconfiguration 
and input/output module connects the hardware state machine to a system bus of the security 
component and controls access to logic of the hardware state machine. 

30. (CURRENTLY AMENDED) A system for providing access to digital services 
comprising: 

(a) a conditional access module (CAM) configured to receive configuration information for 
accessing the digital services, wherein the configuration information has been transmitted 
asynchronously; and 

(b) a custom logic block configured to dynamically reconfigure a hardware state machine in 
die CAM based on the configuration information, wherein the hardware state machine comprises 
custom logic that is used to control accc*a to the digital services, tmd SghttEflifl fl component of the 
h ardware start; machine is not directly accessible to a system input/ou t put module or system hm of the 
CAM.- 

31 . (ORIGINAL) The system of claim 30 wherein the CAM comprises a smart card 

32. (CURRENTLY AMENDED) Ine system of claim 30 wherein the configuration 
information is received through a broadcast stream, Internet, or.callbac k, or other distribution channel 

33. (ORIGINAL) The system of claim 30 wherein the configuration information is 
encrypted. 

34. (ORIGINAL) The system of claim 33 wherein the configuration information is 
encrypted through a key exchange protocol. 

35. (ORIGINAL) The system of claim 34 wherein the key exchange protocol comprises a 
public key algorithm. 

36. (ORIGINAL) The system of claim 33 wherein the configuration information is 
received in uniquely encrypted, group encrypted packets. 
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37. (ORIGINAL) The system of claim 33 wherein the custom logic block is further 
configured to: 

decrypt the configuration infonnation; and 

store the configuration information in one or more protected registers. 

38. (ORIGINAL) The system of claim 30 wherein the custom logic block is further 
configured to verify that the configuration information is authentic. 

39. (ORIGINAL) The system of claim 38 whetcin the custom logic block is further 
configured to retain the configuration information if the configuration information is authentic. 

40. (ORIGINAL) The system of claim 30 wherein the custom logic block is further 
configured to receive a synchronous command to reconfigure the hardware state machine using the 
configuration information. 

41. (CANCELLED) 

42. (ORIGINAL) The system of claim 30 wherein the custom logic block comprises an 
asynchronous dynamic pre-permutation module that employs a series of one or more configurable 
multiplexors at the beginning of the hardware state machine, 

43. (ORIGINAL) The system of claim 30 wherein the custom logic block comprises an 
asynchronous dynamic past-permutation module that employs a series of one or more configurable 
multiplexors at the end of the hardware state machine. 

44. (ORIGINAL) The system of daim 30 wherein the custom logic block comprises a 
dedicated hardware reconfiguration and input/output module that connects the hardware state machine 
to a system bus of the CAM and controls access to logic of the hardware state machine. 
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45. (CURRENTLY AMENDED) An article of manufacture for providing access to digital 
services comprising: 

(a) means for receiving configuration information in a security component comprising *V 
smart curd wherein: 

(1 ) the configuration information has been transmitted asynchronously; and 

(2) the security component is configured to control access to the digital services; 

and 

(b) means for dynamically reconfiguring a hardware state machine in the security 
component based on the configuration information, wherein the hardware state machine comprises 
custom logic that is used to control access to the digital services , and wherein a component of rM 
hardware st*fft machine in nnt directly accessible to a s yste m i nput/oucpur module »r s y stem bus of fi]ti 
security component. , 

46. (CANCELLED) 

47. (CURRENTLY AMENDED) The article of manufecture of claim 45 wherein the 
configuration information is received through a broadcast stream, Internet, oLcaHbac k, nr odie* 
distribu ti on "channel . 

48. (ORIGINATE The article of manufacture of claim 45 wherein the configuration 
information ia encrypted. 

49. (ORIGINAL) l"he article of manufacture of claim 48 wherein the configuration 
information is encrypted through a key exchange protocol 

50. (ORIGINAL) The article of manufacture of claim 49 wherein the key exchange 
protocol comprises a public key algorithm. 

51 . (ORIGINAL) The article of manufacture of claim 48 wherein the configuration 
information is received in uniquely encrypted, group encrypted packets. 
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52. (ORIGINAL) The article of manufacture of claim 48 further comprising: 
means for decrypting the configuration information; and 

means for storing the configuration information in one or more protected registers. 

53. (ORIGINAL) The article of manufacture of claim 45 further comprising means fot 
verifying the configuration information is authentic. 

54. (ORIGINAL) The article of manufacture of claim 53 further comprising means fot 
retaining the configuration information if the configuration information is authentic. 

55. (ORIGINAL) The article of manufacture of claim 45 former comprising means for 
receiving a synchronous command to reconfigure the hardware state machine using the configuration 
information- 
s' (CANCELLED) 

57. (ORIGINAL) The article of manufacture of claim 45 wherein the dynamic 
reconfiguration of the hardware state machine reconfigures a permutation that employs a series of one 
or more configurable multiplexors at the beginning of the hardware state machinc- 

58. (ORIGINAL) The article of manufacture of claim 45 wherein the dynamic 
reconfiguration of the hardware state machine reconfigures a permutation that employs a series of one 
or more configurable multiplexors at the end of the hardware state machine. 

59. (ORIGINAL) The article of manufacture of claim 45 wherein a dedicated hardware 
reconfiguration and input/output module connects the hardware state machine to a system bus of the 
security component and controls access to logic of the hardware state machine. 
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